CVE-2020-11979

EPSS 1.10% · P78 Updated Feb 24, 2026

Get alerts for future matching vulnerabilitiesLog in to subscribe

I. Basic Information for CVE-2020-11979

Vulnerability Information

Have questions about the vulnerability? See if Shenlong's analysis helps!

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title

N/A

Source: NVD (National Vulnerability Database)

Vulnerability Description

As mitigation for CVE-2020-1945 Apache Ant 1.10.8 changed the permissions of temporary files it created so that only the current user was allowed to access them. Unfortunately the fixcrlf task deleted the temporary file and created a new one without said protection, effectively nullifying the effort. This would still allow an attacker to inject modified source files into the build process.

Source: NVD (National Vulnerability Database)

CVSS Information

N/A

Source: NVD (National Vulnerability Database)

Vulnerability Type

N/A

Source: NVD (National Vulnerability Database)

Vulnerability Title

Apache Ant 安全漏洞

Source: CNNVD (China National Vulnerability Database)

Vulnerability Description

Apache Ant是美国阿帕奇（Apache）基金会的一套用于Java软件开发的自动化工具。该工具主要用于软件的编译、测试和部署等。 Apache Ant 1.10.8版本存在安全漏洞。该漏洞源于用户输入构造命令、数据结构或记录的操作过程中，网络系统或产品缺乏对用户输入数据的正确验证，未过滤或未正确过滤掉其中的特殊元素，导致系统或产品产生解析或解释方式错误。

Source: CNNVD (China National Vulnerability Database)

CVSS Information

N/A

Source: CNNVD (China National Vulnerability Database)

Vulnerability Type

N/A

Source: CNNVD (China National Vulnerability Database)

Affected Products

Vendor	Product	Affected Versions	CPE	Subscribe
-	Apache Ant	Apache Ant 1.10.8	-

II. Public POCs for CVE-2020-11979

#	POC Description	Source Link	Shenlong Link

AI-Generated POCPremium

No public POC found.

III. Intelligence Information for CVE-2020-11979

请登录查看更多情报信息。

https://www.oracle.com//security-alerts/cpujul2021.htmlx_refsource_MISC
https://www.oracle.com/security-alerts/cpuapr2022.htmlx_refsource_MISC
https://www.oracle.com/security-alerts/cpujan2022.htmlx_refsource_MISC
https://www.oracle.com/security-alerts/cpuoct2021.htmlx_refsource_MISC
https://www.oracle.com/security-alerts/cpuApr2021.htmlx_refsource_MISC
https://www.oracle.com/security-alerts/cpujan2021.htmlx_refsource_MISC
https://lists.apache.org/thread.html/rc3c8ef9724b5b1e171529b47f4b35cb7920edfb6e917fa21eb6c64ea%40%3Cdev.ant.apache.org%3Ex_refsource_MISC
https://security.gentoo.org/glsa/202011-18vendor-advisoryx_refsource_GENTOO
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DYBRN5C2RW7JRY75IB7Q7ZVKZCHWAQWS/vendor-advisoryx_refsource_FEDORA
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/U3NRQQ7ECII4ZNGW7GBC225LVYMPQEKB/vendor-advisoryx_refsource_FEDORA
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/AALW42FWNQ35F7KB3JVRC6NBVV7AAYYI/vendor-advisoryx_refsource_FEDORA
https://lists.apache.org/thread.html/r107ea1b1a7a214bc72fe1a04207546ccef542146ae22952e1013b5cc%40%3Cdev.creadur.apache.org%3Emailing-listx_refsource_MLIST
[jira] [Assigned] (RAT-274) Update to at least Ant 1.10.8/1.9.15 in order to fix CVE-2020-11979-Apache Mail Archivesmailing-listx_refsource_MLIST
https://lists.apache.org/thread.html/r1dc8518dc99c42ecca5ff82d0d2de64cd5d3a4fa691eb9ee0304781e%40%3Cdev.creadur.apache.org%3Emailing-listx_refsource_MLIST
https://lists.apache.org/thread.html/r2306b67f20c24942b872b0a41fbdc9330e8467388158bcd19c1094e0%40%3Cdev.creadur.apache.org%3Emailing-listx_refsource_MLIST
https://lists.apache.org/thread.html/r5e1cdd79f019162f76414708b2092acad0a6703d666d72d717319305%40%3Cdev.creadur.apache.org%3Emailing-listx_refsource_MLIST
https://lists.apache.org/thread.html/raaeddc41da8f3afb1cb224876084a45f68e437a0afd9889a707e4b0c%40%3Cdev.creadur.apache.org%3Emailing-listx_refsource_MLIST
https://lists.apache.org/thread.html/rbfe9ba28b74f39f46ec1bbbac3bef313f35017cf3aac13841a84483a%40%3Cdev.creadur.apache.org%3Emailing-listx_refsource_MLIST
https://nvd.nist.gov/vuln/detail/CVE-2020-11979

Same Patch Batch · n/a · 2020-10-01 · 22 CVEs total

CVE-2020-14223		HCL Digital Experience 跨站脚本漏洞
CVE-2020-24861		GetSimple CMS 跨站脚本漏洞
CVE-2020-24860		CMS Made Simple 跨站脚本漏洞
CVE-2020-25990		WebsiteBaker SQL注入漏洞
CVE-2020-24620		Unisys Stealth(core) 信任管理问题漏洞
CVE-2020-16844		Istio 安全漏洞
CVE-2020-25017		Envoy 安全漏洞
CVE-2020-25018		Envoy 安全漏洞
CVE-2019-19393		Rittal CMC PU III 跨站脚本漏洞
CVE-2020-25200		pritunl 信息泄露漏洞
CVE-2020-15533		Zoho ManageEngine Application Manager SQL注入漏洞
CVE-2020-9491		Apache NiFi 加密问题漏洞
CVE-2020-5784		Teltonika firmware 代码问题漏洞
CVE-2020-5789		Teltonika firmware 路径遍历漏洞
CVE-2020-5786		Teltonika firmware 跨站请求伪造漏洞
CVE-2020-5785		Teltonika firmware 跨站脚本漏洞
CVE-2020-5787		Teltonika firmware 路径遍历漏洞
CVE-2020-5788		Teltonika firmware 路径遍历漏洞
CVE-2020-9486		Apache NiFi 日志信息泄露漏洞
CVE-2020-9487		Apache NiFi 访问控制错误漏洞

Showing top 20 of 22 CVEs. View all on vendor page → →

IV. Related Vulnerabilities

Same product: Apache Ant

Same vendor: n/a

V. Comments for CVE-2020-11979

No comments yet

Goal Reached Thanks to every supporter — we hit 100%!

CVE-2020-11979

I. Basic Information for CVE-2020-11979

Vulnerability Information

Vulnerability Title

Vulnerability Description

CVSS Information

Vulnerability Type

Vulnerability Title

Vulnerability Description

CVSS Information

Vulnerability Type

Affected Products

II. Public POCs for CVE-2020-11979

III. Intelligence Information for CVE-2020-11979

Same Patch Batch · n/a · 2020-10-01 · 22 CVEs total

IV. Related Vulnerabilities

V. Comments for CVE-2020-11979

Leave a comment